jre17-zulu-bin

maintainer puddings233 · 1 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads prebuilt JRE binaries from Azul's official CDN (cdn.azul.com), which is the legitimate source for Zulu OpenJDK; despite the host not being whitelisted, the checksums are provided and the binaries are from a trusted vendor, making this a standard and safe AUR package.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads prebuilt JRE binaries from Azul's official CDN (cdn.azul.com), which is the legitimate source for Zulu OpenJDK; despite the host not being whitelisted, the checksums are provided and the binaries are from a trusted vendor, making this a standard and safe AUR package.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:44 "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: puddings233 <puddings233 at outlook dot com>
    
      2
    
      3_majorver=17
    
      4_minorver=0
    
      5_securityver=20
    
      6_updatever=8
    
      7_zulu_build="68.17"
    
      8pkgname=jre${_majorver}-zulu-bin
    
      9pkgver=${_majorver}.${_minorver}.${_securityver}.u${_updatever}
    
      10pkgrel=1
    
      11pkgdesc='Azul Zulu OpenJDK full runtime environment, bin version.'
    
      12arch=('aarch64' 'i686' 'x86_64')
    
      13url='https://www.azul.com/downloads/'
    
      14license=('custom')
    
      15depends=(
    
      16  "java-runtime-common>=3"
    
      17  "ca-certificates-utils"
    
      18  "freetype2"
    
      19  "glibc"
    
      20  "harfbuzz"
    
      21  "lcms2"
    
      22  "libgcc"
    
      23  "libjpeg-turbo"
    
      24  "libnet"
    
      25  "libstdc++"
    
      26  "nss"
    
      27  "giflib"
    
      28  "libpng"
    
      29)
    
      30optdepends=(
    
      31  'alsa-lib: for basic sound support'
    
      32  'gtk3: for the Gtk+ 3 look and feel - desktop usage'
    
      33)
    
      34provides=(
    
      35  "java-runtime=${_majorver}"
    
      36  "java-runtime-openjdk=${_majorver}"
    
      37  "jre${_majorver}-openjdk=${pkgver}-${pkgrel}"
    
      38  "java-runtime-headless=${_majorver}"
    
      39  "java-runtime-headless-openjdk=${_majorver}"
    
      40  "jre${_majorver}-openjdk-headless=${pkgver}-${pkgrel}"
    
      41)
    
      42install="$pkgname.install"
    
      43source_aarch64=(
    
      44  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"
    
      45  "freedesktop-java.desktop"
    
      46)
    
      47source_i686=(
    
      48  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_i686.tar.gz"
    
      49  "freedesktop-java.desktop"
    
      50)
    
      51source_x86_64=(
    
      52  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_x64.tar.gz"
    
      53  "freedesktop-java.desktop"
    
      54)
    
      55sha256sums_aarch64=(
    
      56  'dc2004d03e7a8dc82940a35433f1337303dafdbd34a06a030ce957ba38bb3a8a'
    
      57  '4b0278be06c9705063305da113c9b9e6ddf3c00d3a3c51e894885e08ba42dbcb'
    
      58)
    
      59sha256sums_i686=(
    
      60  '946b02fe10d6b9832aac69a7ec6670574b4c6e5c9d2e87b9b16c334922981260'
    
      61  '4b0278be06c9705063305da113c9b9e6ddf3c00d3a3c51e894885e08ba42dbcb'
    
      62)
    
      63sha256sums_x86_64=(
    
      64  '96c6a5cbc4d0c582bb126d41e280b254db0332a93ed37ae2219debfbe4d3e73f'
    
      65  '4b0278be06c9705063305da113c9b9e6ddf3c00d3a3c51e894885e08ba42dbcb'
    
      66)
    
      67
    
      68_jvmdir=/usr/lib/jvm/java-${_majorver}-zulu
    
      69
    
      70case "${CARCH}" in
    
      71  aarch64) _JARCH='aarch64';;
    
      72  i686)   _JARCH='i686';;
    
      73  x86_64) _JARCH='x64';;
    
      74esac
    
      75
    
      76package() {
    
      77
    
      78  cd "$srcdir/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_${_JARCH}"
    
      79
    
      80  install -dm 755 "${pkgdir}${_jvmdir}"
    
      81
    
      82  cp -a bin lib \
    
      83    "${pkgdir}${_jvmdir}"
    
      84
    
      85  # Conf
    
      86  install -dm 755 "${pkgdir}/etc"
    
      87  cp -r conf "${pkgdir}/etc/java${_majorver}-zulu"
    
      88  ln -s "/etc/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/conf"
    
      89
    
      90  # Legal
    
      91  install -dm 755 "${pkgdir}/usr/share/licenses"
    
      92  cp -r legal "${pkgdir}/usr/share/licenses/java${_majorver}-zulu"
    
      93  cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_majorver}-zulu/"
    
      94  ln -s "/usr/share/licenses/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/legal"
    
      95
    
      96  # Link JKS keystore from ca-certificates-utils
    
      97  rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"
    
      98  ln -sf /etc/ssl/certs/java/cacerts "${pkgdir}${_jvmdir}/lib/security/cacerts"
    
      99}
    
      100
    
      101# vim: ts=2 sw=2 et:
    
      102

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-08-03 00:08
@@ -1,9 +1,12 @@
 # Maintainer: puddings233 <puddings233 at outlook dot com>
 
-_java_ver=17
-_zulu_build="${_java_ver}.66.19-ca"
-pkgname=jre${_java_ver}-zulu-bin
-pkgver="${_java_ver}.0.19"
+_majorver=17
+_minorver=0
+_securityver=20
+_updatever=8
+_zulu_build="68.17"
+pkgname=jre${_majorver}-zulu-bin
+pkgver=${_majorver}.${_minorver}.${_securityver}.u${_updatever}
 pkgrel=1
 pkgdesc='Azul Zulu OpenJDK full runtime environment, bin version.'
 arch=('aarch64' 'i686' 'x86_64')
@@ -12,47 +15,67 @@
 depends=(
   "java-runtime-common>=3"
   "ca-certificates-utils"
+  "freetype2"
+  "glibc"
+  "harfbuzz"
+  "lcms2"
+  "libgcc"
+  "libjpeg-turbo"
+  "libnet"
+  "libstdc++"
   "nss"
-  "libnet"
-  "glibc"
-  "gcc-libs"
+  "giflib"
   "libpng"
 )
-conflicts=(
-  "jdk17-openjdk"
-  "jre17-openjdk"
-  "jre17-openjdk-headless"
-  "zulu-17-bin"
-  "zulu-17-fx-bin"
-  "zulu17-fx-bin"
+optdepends=(
+  'alsa-lib: for basic sound support'
+  'gtk3: for the Gtk+ 3 look and feel - desktop usage'
 )
 provides=(
-  "java-runtime-headless=$_java_ver"
-  "java-runtime-headless-openjdk=$_java_ver"
-  "java-runtime=$_java_ver"
-  "java-runtime-openjdk=$_java_ver"
-  "jre${_java_ver}-openjdk=${pkgver}-${pkgrel}"
-  "jre${_java_ver}-openjdk-headless=${pkgver}-${pkgrel}"
+  "java-runtime=${_majorver}"
+  "java-runtime-openjdk=${_majorver}"
+  "jre${_majorver}-openjdk=${pkgver}-${pkgrel}"
+  "java-runtime-headless=${_majorver}"
+  "java-runtime-headless-openjdk=${_majorver}"
+  "jre${_majorver}-openjdk-headless=${pkgver}-${pkgrel}"
 )
 install="$pkgname.install"
-source_aarch64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jre${pkgver}-linux_aarch64.tar.gz")
-source_i686=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jre${pkgver}-linux_i686.tar.gz")
-source_x86_64=("https://cdn.azul.com/zulu/bin/zulu${_zulu_build}-jre${pkgver}-linux_x64.tar.gz")
-sha256sums_aarch64=('2921ec4927e3ba5bd970bea3257f236b4235af6640193e999d1a33cba163d6f8')
-sha256sums_i686=('01988951ede56bb3733258de0494df3e5269d1a0fb540aaa60056f16c25d92b8')
-sha256sums_x86_64=('c72c1967afec8ca4b66747875468178ffa45cd8133a5ab7823650a15a01db204')
+source_aarch64=(
+  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_aarch64.tar.gz"
+  "freedesktop-java.desktop"
+)
+source_i686=(
+  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_i686.tar.gz"
+  "freedesktop-java.desktop"
+)
+source_x86_64=(
+  "https://cdn.azul.com/zulu/bin/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_x64.tar.gz"
+  "freedesktop-java.desktop"
+)
+sha256sums_aarch64=(
+  'dc2004d03e7a8dc82940a35433f1337303dafdbd34a06a030ce957ba38bb3a8a'
+  '4b0278be06c9705063305da113c9b9e6ddf3c00d3a3c51e894885e08ba42dbcb'
+)
+sha256sums_i686=(
+  '946b02fe10d6b9832aac69a7ec6670574b4c6e5c9d2e87b9b16c334922981260'
+  '4b0278be06c9705063305da113c9b9e6ddf3c00d3a3c51e894885e08ba42dbcb'
+)
+sha256sums_x86_64=(
+  '96c6a5cbc4d0c582bb126d41e280b254db0332a93ed37ae2219debfbe4d3e73f'
+  '4b0278be06c9705063305da113c9b9e6ddf3c00d3a3c51e894885e08ba42dbcb'
+)
 
-_jvmdir=/usr/lib/jvm/java-${_java_ver}-zulu
+_jvmdir=/usr/lib/jvm/java-${_majorver}-zulu
 
 case "${CARCH}" in
   aarch64) _JARCH='aarch64';;
+  i686)   _JARCH='i686';;
   x86_64) _JARCH='x64';;
-  i686)   _JARCH='i686';;
 esac
 
 package() {
 
-  cd "$srcdir/zulu${_zulu_build}-jre${pkgver}-linux_${_JARCH}"
+  cd "$srcdir/zulu${_majorver}.${_zulu_build}-ca-jre${_majorver}.${_minorver}.${_securityver}-linux_${_JARCH}"
 
   install -dm 755 "${pkgdir}${_jvmdir}"
 
@@ -61,14 +84,14 @@
 
   # Conf
   install -dm 755 "${pkgdir}/etc"
-  cp -r conf "${pkgdir}/etc/java${_java_ver}-zulu"
-  ln -s "/etc/java${_java_ver}-zulu" "${pkgdir}/${_jvmdir}/conf"
+  cp -r conf "${pkgdir}/etc/java${_majorver}-zulu"
+  ln -s "/etc/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/conf"
 
   # Legal
   install -dm 755 "${pkgdir}/usr/share/licenses"
-  cp -r legal "${pkgdir}/usr/share/licenses/java${_java_ver}-zulu"
-  cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_java_ver}-zulu/"
-  ln -s "/usr/share/licenses/java${_java_ver}-zulu" "${pkgdir}/${_jvmdir}/legal"
+  cp -r legal "${pkgdir}/usr/share/licenses/java${_majorver}-zulu"
+  cp DISCLAIMER "${pkgdir}/usr/share/licenses/java${_majorver}-zulu/"
+  ln -s "/usr/share/licenses/java${_majorver}-zulu" "${pkgdir}/${_jvmdir}/legal"
 
   # Link JKS keystore from ca-certificates-utils
   rm -f "${pkgdir}${_jvmdir}/lib/security/cacerts"

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 23:39:52	MEDIUM	1
2026-06-19 19:07:35	CLEAN	2
2026-06-18 16:11:54	MEDIUM	1